专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US6070243A Deterministic user authentication service for communication network 失效
公开(公告)号：US6070243A
公开(公告)日：2000-05-30
申请号：US874754
申请日：1997-06-13
申请人： Michael E. See , John W. Bailey , Charles L. Panza , Yuri Pikover , Geoffrey C. Stone
发明人： Michael E. See , John W. Bailey , Charles L. Panza , Yuri Pikover , Geoffrey C. Stone
IPC分类号： G06F1/00 , H04K1/00 , H04L29/06 , G06F11/00
CPC分类号： H04L63/08 , G06F21/31 , G06F21/445 , H04L63/102 , G06F2221/2101 , G06F2221/2137 , G06F2221/2141 , H04L12/4641 , H04L63/0823 , H04L63/083 , H04L63/101
摘要： A user authentication service for a communication network authenticates local users before granting them access to personalized sets of network resources. Authentication agents on intelligent edge devices present users of associated end systems with log-in challenges. Information supplied by the users is forwarded to an authentication server for verification. If successfully verified, the authentication server returns to the agents authorized connectivity information and time restrictions for the particular authenticated users. The agents use the information to establish rules for filtering and forwarding network traffic originating from or destined for particular authenticated users during authorized time periods. An enhanced authentication server may be engaged if additional security is desired. The authorized connectivity information preferably includes identifiers of one or more virtual local area networks active in the network. Log-in attempts are recorded so that the identity and whereabouts of network users may be monitored from a network management station.

2. 发明授权

US5546390A Method and apparatus for radix decision packet processing 失效
标题翻译：用于基数决策包处理的方法和装置
公开(公告)号：US5546390A
公开(公告)日：1996-08-13
申请号：US366222
申请日：1994-12-29
申请人： Geoffrey C. Stone
发明人： Geoffrey C. Stone
IPC分类号： H04L29/06 , H04L12/56 , G06F9/28
CPC分类号： H04L29/06 , H04L69/22
摘要： A decision process is optimized through selectively examining only those bits of a protocol data unit received from a communication network which affect the decision process. These decision-significant bits include two non-contiguous bits of the protocol data unit. Subsequently, a portion of the received protocol data unit is compared with a predetermined tuple to validate the decision process. The predetermined tuple includes known values for a specific portion of the protocol data unit having the two non-contiguous decision-significant bits. Associated directives are generated for the protocol data unit based upon the validated decision process. Alternatively, this processing is a radix tree-type decision process in which the decision-significant bits are grouped together into decision groups and decisions are made based on decision groups rather than individual decision-significant bits. In addition, a preprocessing device, a decision processor, and a protocol data unit processing system are provided which perform either decision process.
摘要翻译：通过选择性地仅检查从影响决策过程的通信网络接收的协议数据单元的那些比特来优化决策过程。这些决定有效位包括协议数据单元的两个非连续位。随后，将接收到的协议数据单元的一部分与预定的元组进行比较以验证决策过程。该预定元组包括具有两个不连续的判定有效位的协议数据单元的特定部分的已知值。基于经过验证的决策过程，为协议数据单元生成相关指令。或者，该处理是基数树决策过程，其中决策有效位被分组在一起成为决策组，并且基于决策组而不是单个决策有效位进行决策。此外，提供执行任一决策处理的预处理装置，决策处理器和协议数据单元处理系统。

3. 发明授权

US09154478B2 Deterministic user authentication service for communication network 有权
公开(公告)号：US09154478B2
公开(公告)日：2015-10-06
申请号：US13618862
申请日：2012-09-14
申请人： Michael E. See , John W. Bailey , Charles L. Panza , Yuri Pikover , Geoffrey C. Stone , Michele Wright Goodwin , Robert Leon Sangroniz
发明人： Michael E. See , John W. Bailey , Charles L. Panza , Yuri Pikover , Geoffrey C. Stone , Michele Wright Goodwin , Robert Leon Sangroniz
IPC分类号： H04L29/06 , G06F21/31 , G06F21/44 , H04L12/46
CPC分类号： H04L63/08 , G06F21/31 , G06F21/445 , G06F2221/2101 , G06F2221/2137 , G06F2221/2141 , H04L12/4641 , H04L63/0823 , H04L63/083 , H04L63/101 , H04L63/102
摘要： A user authentication service for a communication network authenticates local users before granting them access to personalized sets of network resources. Authentication agents on intelligent edge devices present users of associated end systems with log-in challenges. Information supplied by the users is forwarded to an authentication server for verification. If successfully verified, the authentication server returns to the agents authorized connectivity information and time restrictions for the particular authenticated users. The agents use the information to establish rules for filtering and forwarding network traffic originating from or destined for particular authenticated users during authorized time periods. An enhanced authentication server may be engaged if additional security is desired. The authorized connectivity information preferably includes identifiers of one or more virtual local area networks active in the network. Log-in attempts are recorded so that the identity and whereabouts of network users may be monitored from a network management station.

4. 发明授权

US06314106B1 Receive processing for dedicated bandwidth data communication switch backplane 失效
公开(公告)号：US06314106B1
公开(公告)日：2001-11-06
申请号：US09063493
申请日：1998-04-20
申请人： Wai King , Geoffrey C. Stone , Christopher Haywood
发明人： Wai King , Geoffrey C. Stone , Christopher Haywood
IPC分类号： H04L1228
CPC分类号： H04L49/351 , H04L45/7453 , H04L49/101 , H04L49/254 , H04L49/3018
摘要： A dedicated bandwidth switch backplane has efficient receive processing capable of handling highly parallel traffic. Packets must pass a filtering check and a watermark check before the receive port is allowed to release them to a queue. Highly efficient algorithms are applied to conduct the checks on the packets in a way which expedites receive processing and avoids contention. A hybrid priority/port-based arbitration algorithm is used to sequence filtering checks on pending packets. A watermark comparison algorithm performs preliminary calculations on the current packet using “projected” output queue write addresses for each possible outcome of the queueing decision on the preceding packet and using the actual outcome to select from among preliminary calculations to efficiently address the outcome-dependence of the current packet's watermark check on the queueing decision made on the preceding packet. Receive ports are operatively divided into full-write receive ports and selective-write receive ports for delivering their packets to the output queue. On the clock cycles where the selective-write receive port is assigned writing privileges, data is read from the queue, unless the selective-write receive port has indicated it wishes to write to the queue, in which case the selective-write receive port writes to the queue. The full-write receive ports always write data, if available, to the queue on the clock cycles where they are assigned writing privileges.

5. 发明授权

US06874090B2 Deterministic user authentication service for communication network 有权
标题翻译：通信网络的确定性用户认证服务
公开(公告)号：US06874090B2
公开(公告)日：2005-03-29
申请号：US09886930
申请日：2001-06-21
申请人： Michael E. See , John W. Bailey , Charles L. Panza , Yuri Pikover , Geoffrey C. Stone
发明人： Michael E. See , John W. Bailey , Charles L. Panza , Yuri Pikover , Geoffrey C. Stone
IPC分类号： G06F1/00 , H04K1/00 , H04L29/06 , G06F11/30 , G06F12/14 , H04L9/00 , H04L9/32
CPC分类号： H04L63/08 , G06F21/31 , G06F21/445 , G06F2221/2101 , G06F2221/2137 , G06F2221/2141 , H04L12/4641 , H04L63/0823 , H04L63/083 , H04L63/101 , H04L63/102
摘要： A user authentication service for a communication network authenticates local users before granting them access to personalized sets of network resources. Authentication agents on intelligent edge devices present users of associated end systems with log-in challenges. Information supplied by the users is forwarded to an authentication server for verification. If successfully verified, the authentication server returns to the agents authorized connectivity information and time restrictions for the particular authenticated users. The agents use the information to establish rules for filtering and forwarding network traffic originating from or destined for particular authenticated users during authorized time periods. An enhanced authentication server may be engaged if additional security is desired. The authorized connectivity information preferably includes identifiers of one or more virtual local area networks active in the network. Log-in attempts are recorded so that the identity and whereabouts of network users may be monitored from a network management station.
摘要翻译：用于通信网络的用户认证服务在给予他们访问个性化的网络资源集之前认证本地用户。智能边缘设备上的认证代理向相关终端系统的用户提供登录挑战。用户提供的信息被转发到认证服务器进行验证。如果成功验证，认证服务器将返回到特定经过身份验证的用户的代理授权连接信息和时间限制。代理使用信息来建立规则，用于在授权的时间段内过滤和转发源自或发往特定认证用户的网络流量。如果需要额外的安全性，则可以使用增强的认证服务器。授权的连接性信息优选地包括在网络中活动的一个或多个虚拟局域网的标识符。记录登录尝试，以便可以从网络管理站监控网络用户的身份和下落。

6. 发明授权

US06757286B1 Self-configuring communication network 失效
标题翻译：自配置通信网络
公开(公告)号：US06757286B1
公开(公告)日：2004-06-29
申请号：US09629362
申请日：2000-08-01
申请人： Geoffrey C. Stone
发明人： Geoffrey C. Stone
IPC分类号： H04L1228
CPC分类号： H04L45/26 , H04L12/4645 , H04L45/02 , H04L45/10 , H04L45/16 , H04L2012/562 , H04L2012/5642 , H04Q11/0478
摘要： Methods for configuring, maintaining connectivity in and utilizing an ATM network. Neighboring switches share topology information and enable links to neighboring switches for tag switching. Point-to-point tagged virtual connections are established between switches on the best and next-best paths learned from topology information. Point-to-multipoint tagged virtual connections are established on the spanning tree path. Multiple tag allocation requests are included in a single message to preserve bandwidth. Next-best paths are established to reduce latency in event of link failure. Forwarding operations may be performed in hardware to reduce latency during message forwarding.
摘要翻译：用于配置，维护和利用ATM网络的连接的方法。相邻交换机共享拓扑信息并启用到相邻交换机的链路以进行标签交换。在拓扑信息学习的最佳和最佳路径上的交换机之间建立点对点标记的虚拟连接。在生成树路径上建立点对多点标记的虚拟连接。单个消息中包含多个标签分配请求以保留带宽。建立下一个最佳路径，以减少链路故障时的延迟。可以在硬件中执行转发操作以减少消息转发期间的延迟。

7. 发明授权

US6041057A Self-configuring ATM network 失效
标题翻译：自配ATM网络
公开(公告)号：US6041057A
公开(公告)日：2000-03-21
申请号：US823078
申请日：1997-03-24
申请人： Geoffrey C. Stone
发明人： Geoffrey C. Stone
IPC分类号： H04L12/46 , H04L12/56 , H04Q11/04 , H04L12/28
CPC分类号： H04L45/26 , H04L12/4645 , H04L12/4675 , H04L45/02 , H04L45/10 , H04L45/16 , H04Q11/0478 , H04L2012/562 , H04L2012/5642
摘要： Methods for configuring, maintaining connectivity in and utilizing an ATM network. Neighboring switches share topology information and enable links to neighboring switches for tag switching. Point-to-point tagged virtual connections are established between switches on the best and next-best paths learned from topology information. Point-to-multipoint tagged virtual connections are established on the spanning tree path. Multiple tag allocation requests are included in a single message to preserve bandwidth. Next-best paths are established to reduce latency in event of link failure. Forwarding operations may be performed in hardware to reduce latency during message forwarding.
摘要翻译：用于配置，维护和利用ATM网络的连接的方法。相邻交换机共享拓扑信息并启用到相邻交换机的链路以进行标签交换。在从拓扑信息学习的最佳和最佳路径上的交换机之间建立点对点标记的虚拟连接。在生成树路径上建立点对多点标记的虚拟连接。单个消息中包含多个标签分配请求以保留带宽。建立下一个最佳路径，以减少链路故障时的延迟。可以在硬件中执行转发操作以减少消息转发期间的延迟。

8. 发明授权

US5550816A Method and apparatus for virtual switching 失效
标题翻译：用于虚拟交换的方法和装置
公开(公告)号：US5550816A
公开(公告)日：1996-08-27
申请号：US366227
申请日：1994-12-29
申请人： Ken Hardwick , Geoffrey C. Stone
发明人： Ken Hardwick , Geoffrey C. Stone
IPC分类号： H04L12/46 , H04L12/56 , G06F13/00
CPC分类号： H04L12/4604 , H04L45/7453
摘要： A physical switching device for use in a communication network to switch Open Systems Interconnection (OSI) network layer packets and method of use therefor is provided. The physical switching device includes at least a first and a second virtual switch. Each virtual switch includes a decision mechanism for determining an associated directive based on a destination identifier within a particular packet received at a data port. A processor is coupled to each virtual switch to insert the particular packet into an outgoing data stream on another data port to deliver the packet. Both data ports are associated with a plurality of data interfaces in the physical switching device. A management apparatus is coupled to each virtual switch to maintain information on an association between the plurality of data interfaces and the virtual switches. The management apparatus limits each processor to only inserting the particular packet on another data port associated with the same virtual switch which received the particular packet.
摘要翻译：提供了一种在通信网络中用于切换开放系统互连（OSI）网络层分组的物理交换设备及其使用方法。物理交换设备至少包括第一和第二虚拟交换机。每个虚拟交换机包括用于基于在数据端口处接收的特定分组内的目的地标识符来确定相关联的指令的决定机制。处理器耦合到每个虚拟交换机以将特定分组插入到另一个数据端口上的输出数据流中以递送分组。两个数据端口与物理交换设备中的多个数据接口相关联。管理装置耦合到每个虚拟交换机以维护关于多个数据接口和虚拟交换机之间的关联的信息。管理装置将每个处理器限制为仅将特定分组插入到与接收到特定分组的相同虚拟交换机相关联的另一数据端口上。

9. 发明授权

US07012896B1 Dedicated bandwidth data communication switch backplane 失效
公开(公告)号：US07012896B1
公开(公告)日：2006-03-14
申请号：US09154966
申请日：1998-09-17
申请人： Christopher Haywood , Geoffrey C. Stone
发明人： Christopher Haywood , Geoffrey C. Stone
IPC分类号： H04L12/26 , H04L12/28
CPC分类号： H04L49/351 , H04L12/4641 , H04L45/7453 , H04L49/354
摘要： A LAN switch has a backplane matrix in which each controller has a dedicated packet bus for propagating packet data. Each bus has a root interfacing with the transmitting (root) controller and a plurality of leaves interfacing with receiving (leaf) controllers. This configuration enables each controller to simultaneously transmit packet data on the root of a bus and receive packet data off a plurality of leaves of other buses without contention. An efficient filtering and stalling system employed at the receive side of the backplane prevents the highly parallel traffic from causing receive side congestion.

10. 发明授权

US06721309B1 Method and apparatus for maintaining packet order integrity in parallel switching engine 有权
标题翻译：用于在并行交换引擎中维护分组顺序完整性的方法和装置
公开(公告)号：US06721309B1
公开(公告)日：2004-04-13
申请号：US09314261
申请日：1999-05-18
申请人： Geoffrey C. Stone , Scot A. Reader
发明人： Geoffrey C. Stone , Scot A. Reader
IPC分类号： H04L1256
CPC分类号： H04L49/153 , H04L49/102 , H04L49/30 , H04L49/3009 , H04L2012/565
摘要： A method and apparatus for maintaining packet order integrity in a switching engine wherein inbound packets are forwarded to different ones of parallel processing elements for switching. Order preservation for packets relating to the same conversation is guaranteed by checking for each inbound packet whether a previous packet from the same source is pending at a processing element and, if the check reveals that such a packet is pending, forwarding the inbound packet to the same processing element as the previous packet.
摘要翻译：一种用于在交换引擎中维持分组顺序完整性的方法和装置，其中入站分组被转发到用于切换的不同并行处理元件。通过检查每个入站分组来确保来自同一来源的先前分组是否在处理元素处于等待状态，并且如果检查显示这样的分组正在等待，则保证与相同对话有关的分组的订单保存，将入站分组转发到与前一个数据包相同的处理元素。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式